3 ms·
Single pass disk encryption or zeroing is fine if you are not facing a nation state actor. I do not think I have seen any credible threats that over-written da
by fbdab103 4y ago
Single pass disk encryption or zeroing is fine if you are not facing a nation state actor.
I do not think I have seen any credible threats that over-written data extraction works on modern drives. Maybe there are tricks where the SSD knows better and allocates blocks off to the side where it is not getting wiped, but those are supposedly addressed by TRIM (with dubious vendor support)
If someone comes across a drive that is zeroed or randomized, who is going to attempt some forensic investigation to retrieve the contents?
- Gordonjcp 4y agoZeroing it is fine no matter who you're facing, to be honest. The NSA don't have some big magic machine that can recover data that's been overwritten. It's gone. The idea of using some latent amount of data on the disk and somehow averaging it all out to get the old data might maybe have worked a tiny bit on old MFM drives in the 1980s.
- fortran77 4y agoI'm not worried about a nation state spending a billion dollars. I'm worried about someone looking at an unalloated section of the drive, or in the sectors that the drive marked "bad", etc. A low-level 0 write just takes a long time on a drive of even 1TB. So I sledge. And then I can look at the drive and know it's OK to toss.